#!/bin/bash yum install -y wget && wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo && yum -y install vim wget bash-completion lrzsz nmap tree nc net-tools htop iotop iftop psmisc ntpdate && systemctl stop firewalld.service && systemctl disable firewalld.service #setenforce 0 && sed ‘7s#enforcing#disabled#g‘ /etc/selinux/config -i #优化文件描述符 echo ‘* - nofile 65535 ‘ >>/etc/security/limits.conf ulimit -n 65535 #内核优化 cat >>/etc/sysctl.conf<<EOF net.ipv4.tcp_fin_timeout = 2 net.ipv4.tcp_tw_reuse = 1 net.ipv4.tcp_tw_recycle = 1 net.ipv4.tcp_syncookies = 1 net.ipv4.tcp_keepalive_time = 600 net.ipv4.ip_local_port_range = 4000 65000 net.ipv4.tcp_max_syn_backlog = 16384 net.ipv4.tcp_max_tw_buckets = 36000 net.ipv4.route.gc_timeout = 100 net.ipv4.tcp_syn_retries = 1 net.ipv4.tcp_synack_retries = 1 net.core.somaxconn = 16384 net.core.netdev_max_backlog = 16384 net.ipv4.tcp_max_orphans = 16384 EOF sysctl -p sed -i.bak ‘[email protected]#UseDNS [email protected] [email protected];[email protected]^GSSAPIAuthentication [email protected] [email protected]‘ /etc/ssh/sshd_config systemctl restart sshd echo ‘* * * * * root /usr/sbin/ntpdate ntp1.aliyun.com‘ >>/etc/crontab
原文地址:https://www.cnblogs.com/root0/p/10175251.html
时间: 2024-11-05 12:15:19